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25 January 1985 


MEMORANDUM FOR: 
FROM: 

SUBJECT: 

REFERENCE: 


Executive Director 

Deputy Director of Central Intelligence 
Configuration Management 

Memo for DDCI frm DDA, dtd 18 Dec. 84, Same 
Subject 


STAT 

STAT 


1. The referenced memorandum (Attachment A) contains a 
proposal to place the Headquarters facility under a form of 
configuration management. This proposal has been approved and 
I have directed that it be implemented in accordance with the 
proposal and its attached draft Headquarters Regulation. 

, Accordingly, you are hereby appointed Chairman, Headquarters 
i Management Group (HMG). 

2. Attachment B is a copy of the Configuration Management 
Plan. This plan provides a detailed outline of the scope of 
the program, as well as the functions and responsibilities of 
the HMG. The Executive Committee will be briefed on the 
details of the program at the first opportunity. 

3. Successful implementation of a program of this nature 
will not occur overnight and will require cooperation and 
education. However, there are a variety of critical issues 
affecting the facility, its current and future support systems, 
as well as space allocation which must be resolved. The 
discipline imposed by configuration management will support the 
coordinated resolution of these issues. I look to the HMG to 
play a central role in this process. 





jonn Ti. McMahon 


Attachments : 

A. Reference 

B. Configuration Management Plan 
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IfiOEC 1984 


MEMORANDUM FOR: Deputy Director of Central Intelligence 
VIA: Executive Director 


FROM: Harry E. Fitzwater 

Deputy Director for Administration 

SUBJECT; Configuration Management 


1. The forthcoming consolidation of the Agency's 
Washington metropolitan area personnel and technical assets at 
Langley has highlighted the need for a controlled means to 
manage the facility housing those assets. The problem has 
been studied and a plan has been developed to place the 
facility, its electrical and mechanical systems, data and 
communications grids and centers, as well as space allocation 
under a form of formal configuration management. The 
Executive Committee will be briefed on the details of this 
program in the near future. 

2. As proposed, configuration management will function 
in a manner similar to that adopted by the Directorate of 
Science and Technology and used elsewhere in the government 
and in the private sector. Critical systems will be 
identified and placed under control. Changes affecting those 
systems will be subject to a review and approval process. A 
configuration management secretariat established within the 
Office of Logistics will be responsible for administration, 
and one of two boards will approve changes prior to 
implementation. 

3. Attached is a draft regulation implementing this 
program. The regulation describes the boards, their 
membership, and responsibilities. The regulation also lists 
the systems to be placed under configuration management. 

4. Additional resource requirements will be modest and 
essentially involve realignment and centralizing existing 
efforts. Some contract support may be needed during the 
initial implementation period. 

5. Unless otherwise directed, we are prepared to 
initiate this program shortly after the first of the year. 
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SUBJECT: Configuration Management 

Implementation will be in phases as systems are brought under 
control. Full implementation is anticipated by December 1985. 

STAT 

Attachment 

cc : D/OC 

D/OCP 
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SECTIOH 1 


1.0 INTRODUCTION 

1.1 PURPOSE 

The purpose of this configuration management plan Is to define policy and 
procedures regarding configuration management activities at the Headquarters 
Facility. It describes the organizations and functions which are responsible 
for configuration management, the documentation which describes the Items 
under control, and the processes to control changes to that documentation. 

1.2 SCOPE 

This plan establishes the configuration management requirements for 
documenting and controlling changes to headquarters facilities In order to 
ensure proper (a) Identification and documentation of the functional and 
physical characteristics, (b) control of changes to those characteristics, and 
(c) recording and reporting approved changes and the status of their 
implementation. 

Control of the configuration management process requires a management 
structure with sufficient authority and responsibility to ensure compliance. 
The plan, therefore, delineates the management structures and positions which 
will be Involved in various configuration management tasks. These Include 
configuration management boards, an evaluation/integration function, board 
secretariat, element chiefs, and other headquarters personnel. The plan also 
Includes a priority system to aid In the management of the CM process. 

The requirements cited herein are approved by the Headquarters Management 
Group (HMG) and supplemented through Implementing instructions as required. 
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SECTION 2 


2.0 APPLICABLE DOCUMENTS AND ACRONYMS 

2.1 DOCUMENTS 

The following documents are guidelines for this plan and are applicable only 
to the extent cited. In the event of a conflict between this plan and the 
referenced documents, this plan will apply. 

Headquarters Configuration Management Secretariat (CMS) Instruction 
Headquarters Project Control Plan 

Headquarters Facility Modification Plan (FMP) Instruction 
Headquarters Request for Change (RFC) Preparation and Processing 
Instruction 

Headquarters Facility Planning Staff (FPS) Organization and Operations 
Plan 

Headquarters Controlled Document Preparation Instruction 

2.2 ACRONYMS 


A4E 

- 

Architectual 4 Engineering 

CM 

- 

Configuration Management 

CMBD 

- 

Configuration Management Board Directive 

CMS 

- 

Configuration Management Secretariat 

E 

- 

Emergency 

FBD 

- 

Facility Baseline Document 

FMG 

- 

Facilities Management Group 

FMP 

- 

Facility Modification Plan 

FRD 

- 

Facility Requirements Document 

HBD 

- 

Headquarters Board Directive 

HMG 

- 

Headquarters Management Group 

HOME 

- 

Headquarters Operations, (Maintenance and Engineering Division 

ICO 

- 

Interface Control Document 

I OR 

- 

Interface Drawing Requirement 

LAN 

- 

Local Area Network 

R 

- 

Routine 

RFC 

- 

Request for Change 

U 

- 

Urgent 
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SECTION 3 


3.0 HEADQUARTERS ORGANIZATION AND RESPONSIBILITIES 

The structure which is responsible for configuration management, project 
control, and document management Is depicted in Figure 1. The 
responsibilities of the configuration management organizations are shown below. 

3.1 HEADQUARTERS MANAGEMENT GROUP (HMG) 

3.1.1 HMG MEMBERSHIP 

The HMG members are as follows: TBD 

Chairman: TBD 
Vice-Chairman: TBD 
f'lembers: TBD 

Other individuals may be requested to attend board meetings as consultants to 
the board at the direction of the chairman. In the absence of the Chairman 
the vice-chairman will serve as Acting Chairman, per the Chairman's 
instructions. 

3.1.2 HMG RESPONSIBILITIES 

The HMG has ultimate responsibility to control all headquarters facility 
items under control of the configuration management system identified in 
tables 1-3 of this plan. To the extent shown below, this authority has been 
the Facilities Management Group (FMG), and the Element Chiefs. 

The HMG will review and provide direction on proposed changes (RFCs) to the 
documents under their control as specified In Section 4. Each board member 
will assist in this effort by providing advice and recommendations regardinq 
each change. The Chairman of the HMG has approval authority for these 

proposals. Any action taken by any other configuration control board may be 
appealed to the HMG. 
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-3.2 FACILITIES MANAGEMENT GROUP (FMG) 

3.2.1 FMG MEMBERSHIP 

The FMG members are as follows: 

Chairman Chief, Headquarters Operations, 

Maintenance and Engineering Div. (HOME) 

Vice-Chairman Deputy, HOME 

Members Chief, Engineering and Construction 

Chief, Operations and Maintenance 
Representatives from Commo, OOP, Security and Safety 

Other Individuals may be requested to attend board meetings as consultants to 
the board at the direction of the chairman. In the absence of the Chairman, 
the Vice Chairman will preside at FMG meetings. 

3.2.2 FMG RESPONSIBILITIES 

The FMG, per HMG delegation, has the configuration management 
responsibility for all headquarters Items which meet the appropriate criteria 
specified In Section 4. Final disposition for all FMG actions will be made by 
the presiding Chairman based on the advice of the board members. Each board 
member will assist by providing recommendations regarding each Item reviewed. 

3.3 ELEMENT CHIEFS* (TBD) 

Each Element Chief, per HMG delegation, has configuration control 
responsibility for those Items which meet the appropriate criteria specified 
In Section 4. In addition, each Element Chief, through concurrence signature, 
controls the submittal of RFCs to the FMG and HMG. Change Implementation 
authority for controlled configuration Items ultimately resides with the 
appropriate Element Chief, although this authority may be delegated. Element 
Chiefs shall, as appropriate, provide to CMS technical support to assist In 
evaluating proposed changes to configuration controlled documentation. 

3.4 CONFIGURATION MANAGEMENT SECRETARIAT (CMS) 

The CMS Is responsible for providing administrative support to the HMG, 

FMG and, as required. Element Chiefs in matters pertaining to configuration, 
documentation, or project management. This includes the preparation of 
meeting agendas, minutes, and schedules: the issuance of the necessary 
Implementing Headquarters Instructions, the maintenance of status records; the 
Issuance of status reports; the monitoring of RFC-related activities; the 
maintenance of specified controlled documents: and the maintenance of the 
Headquarters Master Schedule, appropriate project schedules, and the 
associated milestone reportihg system. 

*The terra "element" can be replaced with a more definitive one after a 
decision Is made concerning the composition of the HMG. 
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The CMS is responsible for supporting the HMG, FMG and Element Chiefs in 
all matters pertaining to the integration of proposed changes into the current 
Headquarters Configuration Management Baseline. In addition, CMS will act as 
the technical arm of HMG and FMG by: (1) assessing each change requiring 
approval to ensure the facility integration of the change; (2) reviewing all 
implemented RFCs and directing closure, when appropriate; and (3) when 
provided, reviewing non-Headquarters RFCs so that advice can be given 
regarding the potential impact on Headquarters operations. 
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SECTION 4 


4.0 BASELINE CONTROL 

4.1 BASELINE DEFINITION 

The Headquarters Configuration Management Baseline consists of a set of 
technical documentation (e.g., specifications, drawings, plans, and manuals) 
which define Headquarters's current operational capability and specified 
documents which describe new or changed capabilities under development. Since 
the In-place hardware and facility Items reflect the Implementation of the 
technical documentation they are, by extension. Included In configuration 
control . 

4.2 BASELINE MANAGEMENT 

Within the broad context of baseline management, four primary tasks need 
to be accomplished. These tasks include (1) overall direction and 
review/approval cycle, (2) initial documentation preparation, (3) 
custodianship (i.e., document maintenance), and (4) document status accounting. 

Initial documentation preparation, whether a complete document or change 
pages will normally be accomplished by the Individual or component submitting 
the change (via an RFC). After board approval, the preparation and 
distribution of the change package will be accomplished by the custodian of 
the document. The last task, document status accounting, will be accomplished 
using inputs from all custodians. As required, CMS will establish 
standardized formats and appropriate numbering systems for all documents under 
HMG or FMG control . 

4.3 BASELINE CHANGE 

Direction to change the contents of a baseline document is given by the 
approval of a proposed RFC. The change request Identifies the need for change 
and very often the actual changes are Included as part of the RFC package. 

When advised that a change Is approved, CMS will prepare the updated pages and 
the change package In accordance with the appropriate directive. Cosmetic and 
administrative documentation changes do not require control authority approval 
but will be included by CMS In the next change package. 
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• 4.3.1 REQUEST FOR CHANGE TO THE HEADQUARTERS FACILITY 

Requests for Change (RFCs) to Headquarters Facility will be processed as 
outlined in this document and Headquarters Request for Change (RFC) 

Instruction. 

4.3.2 FACILITY RELATED DOCUMENTS 

Change descriptions for installations affecting the facility will be 
described in a hierarchy of documents. As the data from each document is 
captured in the next higher document, the lower document may be rescinded. 

The key documents and their relationships are described below. 

(1) Interface Drawing Requirement Package (IDR) - 

The IDR consists of the initial set of instructions regarding a 
proposed change to the facility. The IDR should provide sufficient 
information to describe fully the requirements of the requestor and allow 
coordination of the proposed change with other support components, as 
appropriate. 

(2) Facility Modification Plan (FMP) - 

The FMP is an FMG-controlled document which establishes the 
"build-to" change to the existing configuration. It uses the information 
contained in the IDR as a basis and serves to document all information 
required to complete the installation. Once the installation has been 
completed, the FMP is rescinded by an RFC which also transfers the final 
"as-built" data to the Facility Baseline Document. 

(3) Facility Baseline Document (FBD) - 

The FED is an FMG-controlled document which is the top level baseline 
document describing all physical aspects of the facility along with 
certain major systems considered critical to operations. Updates to it 
are made via a revised RFC prepared by the Headquarters Operations 
Maintenance and Engineering Division (HOME) after the changes to the 
facility have been made; therefore, it is considered an "as-built" 
baseline. 

(4) Facility Requirements Document (FRD) 

The FRD is a FMG controlled document which is the top level 
requirements document describing the facility requirements for the 
existing and new addition to the facility. Changes to the FRD are made 
via an RFC submitted to .the FMG. 
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■ 4.3.3 FACILITY RELATED OCC'JN'ENTS CHANGE PROCEDURE 

Requests for changes to the facility which impact controlled documentation 
are initiated by the preparation of an Interface Drawing Requirements Package 
(lOR) and/or a Request for Change (RFC). The responsibilities and steps for 
processing the facilities changes are described below and illustrated in 
Figure 2. 


4. 3. 3.1 Originator of the Facility Change 

The originator/requestor of a change to the facility is responsible for 
contacting CMS to coordinate the preparation of the necessary documentation to 
describe the change requirements and for the preparation of other 
documentation as described in this section and indicated in Figure 2. 

4. 3. 3. 2 Headquarters Operations Maintenance and Engineering Division (HOME) 

The Headquarters Operations Maintenance and Engineering Division is 
responsible to coordinate all requests for changes to the current building, to 
the new building and for the preparation of Facility Modification Plans 
(FMPs). Space allocations, building modifications, renovations, relocation of 
conduits, and changes regarding utilities will be reviewed by the 
Configuration Management Secretariat (CMS) of HOME prior to either HMG or FMG 
approval or the entering into contractual agreements. CMS will determine 
through an initial review if either the Facilities Requirements Document 
(FRD), Facilities Baseline Document (FBD), or an existing FMP is impacted by 
the request for a facility change. Additionally, CMS will determine if an FMP 
is required by using the criteria for an FMP as established in the 
headquarters instruction concerning FMPs. 

After review, coordination, and evaluation by CMS, requests will be 
forwarded to the appropriate configuration management board. If the FRD, FBD, 
or an existing FMP is not impacted and there is no requirement for a new FMP, 
HOME will prepare the necessary plans, conduct architectural and engineering 
studies if necessary, and contract for construction. 

4. 3. 3. 3 FMG Review and Approval of Facility Changes 

A proposed facility change (and the IDR) that impacts the Facility 
Requirements Document (FRD) must be submitted via an RFC (prepared by the 
originator) to the FMG for review and approval. Upon FMG approval, the FMP is 
placed under FMG control and HOME may proceed with the AAE and construction 
phases. Changes made to the FMP during ME or contruction phases must be 
submitted to the FMG for approval. Upon completion of construction, HOME will 
prepare an RFC to rescind the FMP and provide updating redlines to the 
Facility Baseline Document. , 
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Figure 2. Headquarters Facility Renovation Prdcedure 
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When a proposed facility change and IDR does not impact the FRD but does 
require an FMP, HOME will prepare FMP and the RFC for submittal to the FMG for 
approval. Upon FMG approval, the FMP is placed under FMG control and HOME may 
proceed with the A4E and construction phases as described In the above 
paragraph. 

A proposed facility change that does not require an FMP but does impact 
the Facility Baseline Document (FBO) must be submitted via RFC, with redlines 
to the FBO, for FMG approval. Upon approval, HOME can proceed with A4E and 
construction phases. Modifications made to the approved changes during AAE or 
construction phases must be submitted by HOME to the FMG for approval. After 
completion of construction, HOME will prepare an RFC which will provide final 
redlines to the FBO if previously submitted redlines have been modified. 
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. 4.4 BASELINE CRITERIA 

The following criteria will be used to determine the proper level of 
control whenever a candidate document, or its related configuration item, is 
being considered for configuration management control. 

4.4.1 HMG CONTROL 

(1) Headquarters Configuration Management Plan. 

(2) Headquarters Master Schedule. 

(3) Headquarters Project Control Plan 

(4) Headquarters Allocation of Space Document 

(5) Other items as specified by HMG. 

4.4.2 FMG CONTROL 

(1) Technical documentation describing in-place capabilities, interfaces, 
and procedures (Headquarters Baseline). 

(2) Formal documentation used to verify added/changed capabilities. 

(3) Intra-Headquarters Interface Control Documents (ICOs) and technical 
interface documentation. 

(4) Modifications to the facility structure, excluding changes to the 
interior walls within a component's area which do not form a part of the 
building structure or a part of a vault wall. 

(5) The installation and/or the component allocation of technical 
equipment in the facility. For the purpose of this plan, the following 
types of equipment are considered technical equipment; 

a. Computer centers 

b. Communications hardware 

c. Wang office equipment 

d. Secure voice system 

e. Non-secure phone network 

f. Fire/security system 

g. Operations critical areas 

> 

h. Screen rooms 

i. Laboratories/clean rooms 

j. Other items as specified by the FMG. 
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(6) Modifications to the facility electrical or mechanical systems 
required to support the technical equipment itemized in paragraph (5) 
above. 

(7) The entirety of a data grid system including the Main Distribution 
Frame down to and including wall boxes (Data Drops). 

4.4.3 ELEMENT CONTROL 

Any item not specifically mentioned above, such as: 

(1) Intra-element documentation/procedures. 

(2) Changes to and relocation of technical equipment providing that it 
can be accomplished without affecting the existing electrical or 
mechanical systems. 

(3) Test procedures/reports documentation. 

4.5 APPROVED BASELINE 

Tables 1, 2, and 3 itemize the documents which are currently under HMG, 
FMG, or element control, respectively. Each table shows the item's 
title/name, its control number, and the Headquarters organization having 
custodial (maintenance) responsibility for the item. As new items are 
approved for configuration management control, via RFCs approved by the change 
control authority, they will be added by CMS to the appropriate table. 
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TABLE 1 

HMG CONFIGURATION CONTROL BASELINE 


Title 

Doc. No. 

Custodian 

Headquarters Configuration Management Plan 

(TBD) 

CMS 

Headquarters Master Schedule 

(TBD) 

CMS 

Headquarters Project Control Plan 

(TBD) 

CMS 

Headquarters Allocation of Space Drawings 

(TBD) 

CMS 
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TABLE 2 

FMG CONFIGURATION CONTROL BASELINE 


Title 

Doc. No. 

Custodian 

REQUIREMENTS 



New Building Requirements Document 

(TBD) 

CMS 

BASELINE DOCUMENTS 



Facility Baseline Document 

Operations Critical Areas 

Vaulted Areas 

Computer Center/s 

(TBO) 

(TBD) 

(TBD) 

(TBD) 

CMS 

CMS 

CMS 

CMS 

TECHNICAL EQUIPMENT 



Secure Voice Net 

Data Grid 

Non-Secure Phone System 

Fire/Security System 

Screen Rooms 

(TBD) 

(TBD) 

(TBD) 

(TBD) 

(TBD) 

CMS 

CMS 

CMS 

CMS 

CMS 

WORD PROCESSING EQUIPMENT 



Wang Office Equipment 

(TBD) 

CMS 

TEST DOCUMENTS 




INTERFACE DOCUMENTS 


FACILITY MODIFICATION PLANS 
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TUIe 

(TBO) 


TABLE 3 

ELEMENT CONFIGURATION CONTROL BASELINE 


Doc. No. 
(TBO) 


Custodian 

(TBD) 
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SECTION 5 


5.0 PRIORITY SYSTEM 

5.1 PRIORITY SYSTEM USAGE 


1" effectively applying the limited resources available 
to accomplish the most important configuration management tasks first a 

priority system has been established. This system defines criteria which will 
H e ”3 operational configuration managemeli Uem 

(i.e., RFC) submitted. Based on the assigned priority, due dates will be 
assigned to each item for completing the necessary actions/tasks! 

5.2 PRIORITY LEVELS 

The three priorities to be used are Emergency, Urgent, and Routine The 

'•’i' *’* <"*«'''« ti>e poss b?; 

compromise of national security, hazardous conditions, or failure of 

headquarters to accomplish a primary function. The urgent priority will be 
when the Item involves mission effectiveness, potentially hazardous 
siMifJv^nt contractual requirements, serious schedule slippage 

liS I f ^ increased costs, or when time is of the essence to achieve net 
Ilf® ®^cess of one hundred thousand dollars. The routine 

appficablT assigned when neither of the other two priorities are 
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SECTION 6 

6.0 CHANGE REQUEST SYSTEM 

6.1 OVERVIEW 


The change request system is designed to provide a systematic process for 
coordination, and disposition of all proposed changes to th^ 
established baselines and their associated configuration Items. The system 
requires standardized forms to clearly and concisely document the prowsL 
changes, an administrative procedure to ensure the orderly consideration of 

proposed changes, and responsible control authorities to provide direction 
regarding each proposed change. uireccion 

6.2 PROCESSING 


' """Suration mnagement 


a. 


b. 


c. 

d. 

e. 

f. 


An initiator Identifies a need for change, determines Its priority. 

reviews the proposed change and. depending on the 
level of control of any controlled documents affected, either 
approves it for implementation or authorizes submittal- to the 
appropriate control board, via CMS. 

CMS logs and, if a board approval is required, conducts Technical 
Evaluation Meetings (TEMs), provides an Integration evaluation, and 
forwards the RFC and its evaluation to the appropriate control board. 

HMG or FMG, as appropriate, reviews and provides final direction. 

Change Implementor(s) performs the assigned action{s). 

activities'^ tracking, status acounting, reporting, and closure 


6.3 PRIORITY PROCESSING 

J?! timelines In processing an RFC shall be assigned based on the 
En? circumstances dictate otherwise, the following guidelines 

will be used In assigning due dates for RFC actions: ^ ^ 
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PRIORITY 
Emergency (E) 

Urgent (U) 

Routine (R) 

In order to expedite critical RFCs 
following short approval cycle options 
the final approval authority (the Boar 


DUE DATE 

Review by each higher level of control 
within 24 hours of logging in by OiS. 

Review by each higher level of control 
within seven (7) days. 

Review as part of the normal 
a<*r,ini strati ve flow which maximizes 
cost effectiveness within program 
constraints. 

requiring board direction, the 
may be exercised at the discretion of 
I Chairman): 


a. Call a special ad hoc meeting(s). 

b. Waiver of lower level review/concurrence (approved by board chairman 
alone) . 


c. Direct CMS to walk the RFC around to each board member for 
review/signature. 

6.4 DOCUMENTATION 


CMS will establish a unique numbering system for all change forms. Board 
review decisions will be recorded on a separate form, the Configuration 
Management Board Directive (CMBO), will serve as authorization documentation. 
Each change request will be documented on a form designed by CMS. As a 
minimum, the Request for Change (RFC) forms shall contain: 


a. Title 

b. Originator identification 

c. Priority 

d. Type of change (i.e., permanent or temporary) 

e. Recommended implementation date 

f. Need for change 

g. Description of change 

h. Consequences if not implemented and alternatives 

i. Portion of the facility affected 

j. Cost/Schedule estimates 

k. Red-lined changes to controlled documents affected (if appropriate and 
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6.5 LEVELS OF DETAIL 

The level of detail contained in an RFC will vary according to the 
complexity of the change and the expertise of the individual completing the 
form. The individual preparing the form is responsible for coordinating each 
change and obtaining the necessary Information, if available. As part of the. 
implementing instruction, CMS will prepare and maintain a checklist which 
itemizes, in detail, all factors to be considered when preparing an RFC. 

When the detail provided in the initial RFC is Insufficient to direct 
implementation actions, additional iterations may be required by the approval 
authority. In such cases, the additional detail will be documented as a 
revision RFC. 
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SECTION 7 


7.0 STATUS ACCOUNTING 

7.1 STATUS ACCOUNTING TASKS 

In order to assist all personnel Involved in configuration management at 
Headquarters, CMS will maintain status records with sufficient detail so that 
the history of each uniquely controlled form and document Is available. A 
summary of these records will be Issued on a periodic basis so that key 
information is Immediately available to Interested personnel. In addition, 
custodians will maintain records and Issue periodic reports for all hardware 
software and facility items under their control. 

7.2 STATUS ACCOUNTING REPORTS 

Table 4 defines items for which records shall be maintained, the 
information which shall be reported, the periodicity of the reports, and a 
generalized distribution list. 
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TABLE 4 


STATUS REPORT REQUIREMENTS 


ITEM 

MINIMUM REPORTABLE DATA 

MINIMUM ISSUANCE 

RFC 

Number, Title Originator, 

Status, Status Date, Actlonee, 
Due Date 

Twice monthly 

Controlled 

Documents 

Number, Title, Approved RFC, 
Incorporation Status, Status 
Date, Document Revision Status 

Monthly 


ROUTINE DISTRIBUTION 
Determined by CMS 

Determined by CMS 
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SECTION 8 


8.0 CONFIGURATION MANAGEMENT AUDITS 

Periodically, the Headquarters Configuration Management Secretariat (CMS) 
win conduct audits of element configuration management efforts to assure 
compliance with this plan and with the Instructions and procedures established 
In support of the plan. The audits will consist of an announced measurement 
of conformance of personnel, product, or processes to those pre-established 
policies, procedures. Instructions, or standards comprising the Configuration 
Management System. The audits will be performed to assess the following: 

a. Status and traceability of the Implementation of approved changes 
into the documentation and the related configuration Items. 

b. Compliance with configuration management policies, procedures, and 
practices. 

At the conclusion of the audit a report will be sent to the organization 
audited outlining the specific Items audited, findings of the audit, and 
agreed- to corrective action. Copies will also be distributed to appropriate 
levels of management. 
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